@fusengine/harness 0.1.39 → 0.1.40

package/dist/adapters/claude/index.d.mts

@@ -1,2 +1,2 @@
-import { a as guard, i as fileSizeGuard, n as contextResponse, o as readClaudeInput, r as denyResponse, s as toClaudeResponse, t as ClaudeHookInput } from "../../index-FrWgmkbP.mjs";
-export { ClaudeHookInput, contextResponse, denyResponse, fileSizeGuard, guard, readClaudeInput, toClaudeResponse };
+import { a as fileSizeGuard, c as toClaudeResponse, i as denyResponse, n as blockResponse, o as guard, r as contextResponse, s as readClaudeInput, t as ClaudeHookInput } from "../../index-CwOdFBOr.mjs";
+export { ClaudeHookInput, blockResponse, contextResponse, denyResponse, fileSizeGuard, guard, readClaudeInput, toClaudeResponse };

package/dist/adapters/claude/index.mjs

@@ -1,2 +1,2 @@
-import { a as readClaudeInput, i as guard, n as denyResponse, o as toClaudeResponse, r as fileSizeGuard, t as contextResponse } from "../../claude-ZgTC5yDS.mjs";
-export { contextResponse, denyResponse, fileSizeGuard, guard, readClaudeInput, toClaudeResponse };
+import { a as guard, i as fileSizeGuard, n as contextResponse, o as readClaudeInput, r as denyResponse, s as toClaudeResponse, t as blockResponse } from "../../claude-BnFrSfMo.mjs";
+export { blockResponse, contextResponse, denyResponse, fileSizeGuard, guard, readClaudeInput, toClaudeResponse };

package/dist/adapters/cline/index.mjs

@@ -1,4 +1,4 @@
-import { t as evaluate } from "../../evaluate-za4vT-p7.mjs";
+import { t as evaluate } from "../../evaluate-B1n1ti0N.mjs";
 import { t as formatPrompt } from "../../types-ernB1Dy3.mjs";
 //#region src/adapters/cline/index.ts
 /**

package/dist/adapters/codex/index.d.mts

@@ -1,2 +1,2 @@
-import { a as guard, n as contextResponse, o as readClaudeInput, r as denyResponse, t as ClaudeHookInput } from "../../index-FrWgmkbP.mjs";
+import { i as denyResponse, o as guard, r as contextResponse, s as readClaudeInput, t as ClaudeHookInput } from "../../index-CwOdFBOr.mjs";
 export { type ClaudeHookInput as CodexHookInput, contextResponse, denyResponse, guard, readClaudeInput as readCodexInput };

package/dist/adapters/codex/index.mjs

@@ -1,2 +1,2 @@
-import { a as readClaudeInput, i as guard, n as denyResponse, t as contextResponse } from "../../claude-ZgTC5yDS.mjs";
+import { a as guard, n as contextResponse, o as readClaudeInput, r as denyResponse } from "../../claude-BnFrSfMo.mjs";
 export { contextResponse, denyResponse, guard, readClaudeInput as readCodexInput };

package/dist/adapters/cursor/index.mjs

@@ -1,4 +1,4 @@
-import { t as evaluate } from "../../evaluate-za4vT-p7.mjs";
+import { t as evaluate } from "../../evaluate-B1n1ti0N.mjs";
 import { t as formatPrompt } from "../../types-ernB1Dy3.mjs";
 //#region src/adapters/cursor/index.ts
 /**

package/dist/adapters/gemini/index.mjs

@@ -1,4 +1,4 @@
-import { t as evaluate } from "../../evaluate-za4vT-p7.mjs";
+import { t as evaluate } from "../../evaluate-B1n1ti0N.mjs";
 import { t as formatPrompt } from "../../types-ernB1Dy3.mjs";
 //#region src/adapters/gemini/index.ts
 /**

package/dist/cache/index.d.mts

@@ -1,2 +1,2 @@
-import { a as extractText, c as summarizeIndex, d as queryHash, i as mcpCacheKey, l as compactMarkdown, n as cachePath, o as IndexSummary, r as cacheStore, s as loadIndex, t as cacheLookup, u as jaccardSimilar } from "../index-DPkCX_AR.mjs";
-export { IndexSummary, cacheLookup, cachePath, cacheStore, compactMarkdown, extractText, jaccardSimilar, loadIndex, mcpCacheKey, queryHash, summarizeIndex };
+import { a as mcpCacheKey, c as extractText, d as summarizeIndex, f as compactMarkdown, i as cacheStore, l as IndexSummary, m as queryHash, n as cacheLookupSubstring, o as mcpCacheWrite, p as jaccardSimilar, r as cachePath, s as webfetchCacheWrite, t as cacheLookup, u as loadIndex } from "../index-BX-xcvhY.mjs";
+export { IndexSummary, cacheLookup, cacheLookupSubstring, cachePath, cacheStore, compactMarkdown, extractText, jaccardSimilar, loadIndex, mcpCacheKey, mcpCacheWrite, queryHash, summarizeIndex, webfetchCacheWrite };

package/dist/cache/index.mjs

@@ -1,3 +1,3 @@
-import { n as jaccardSimilar, r as queryHash, t as compactMarkdown } from "../cache-C9z9LclL.mjs";
-import { a as extractText, i as mcpCacheKey, n as cachePath, o as loadIndex, r as cacheStore, s as summarizeIndex, t as cacheLookup } from "../store-PrNPm6So.mjs";
-export { cacheLookup, cachePath, cacheStore, compactMarkdown, extractText, jaccardSimilar, loadIndex, mcpCacheKey, queryHash, summarizeIndex };
+import { a as cachePath, c as extractText, d as compactMarkdown, f as jaccardSimilar, i as cacheLookupSubstring, l as loadIndex, n as webfetchCacheWrite, o as cacheStore, p as queryHash, r as cacheLookup, s as mcpCacheKey, t as mcpCacheWrite, u as summarizeIndex } from "../mcp-store-CDUVqtJ0.mjs";
+import "../cache-la_KkjCS.mjs";
+export { cacheLookup, cacheLookupSubstring, cachePath, cacheStore, compactMarkdown, extractText, jaccardSimilar, loadIndex, mcpCacheKey, mcpCacheWrite, queryHash, summarizeIndex, webfetchCacheWrite };

package/dist/cache-la_KkjCS.mjs

@@ -0,0 +1 @@
+export {};

package/dist/{claude-ZgTC5yDS.mjs → claude-BnFrSfMo.mjs}

@@ -1,4 +1,4 @@
-import { t as evaluate } from "./evaluate-za4vT-p7.mjs";
+import { t as evaluate } from "./evaluate-B1n1ti0N.mjs";
 import { t as formatPrompt } from "./types-ernB1Dy3.mjs";
 import { dirname, join } from "node:path";
 import { existsSync, mkdirSync, readFileSync, readdirSync, writeFileSync } from "node:fs";
@@ -87,7 +87,7 @@ async function readClaudeInput() {
 		return {};
 	}
 }
-/** A `deny` hook response for a given event. */
+/** A `deny` hook response for a given event. PreToolUse-only field. */
 function denyResponse(event, reason) {
 	return JSON.stringify({ hookSpecificOutput: {
 		hookEventName: event,
@@ -95,6 +95,20 @@ function denyResponse(event, reason) {
 		permissionDecisionReason: reason
 	} });
 }
+/**
+* A PostToolUse (and Stop/UserPromptSubmit) `block` response. These events
+* ignore `hookSpecificOutput.permissionDecision` (a PreToolUse-only field) and
+* only honor the top-level `decision`/`reason` keys, which feed the reason back
+* to Claude as automated feedback.
+* @param reason - The block feedback shown to Claude.
+* @returns The native `{decision:"block",reason}` response string.
+*/
+function blockResponse(reason) {
+	return JSON.stringify({
+		decision: "block",
+		reason
+	});
+}
 /** An `additionalContext` injection response. */
 function contextResponse(event, text) {
 	return JSON.stringify({ hookSpecificOutput: {
@@ -134,4 +148,4 @@ function guard(input) {
 /** @deprecated use {@link guard}. Kept for back-compat. */
 const fileSizeGuard = guard;
 //#endregion
-export { readClaudeInput as a, pathExists as c, spawnCapture as d, writeText as f, guard as i, readText as l, denyResponse as n, toClaudeResponse as o, fileSizeGuard as r, collectFiles as s, contextResponse as t, sleep as u };
+export { guard as a, collectFiles as c, sleep as d, spawnCapture as f, fileSizeGuard as i, pathExists as l, contextResponse as n, readClaudeInput as o, writeText as p, denyResponse as r, toClaudeResponse as s, blockResponse as t, readText as u };

package/dist/cli/bin.mjs

@@ -1,9 +1,10 @@
 #!/usr/bin/env node
-import { n as loadDotenv, o as resolveTtlSec } from "../dotenv-TLNMiSjP.mjs";
+import { r as resolveTtlSec } from "../ttl-BG55s6HZ.mjs";
+import { r as loadDotenv } from "../dotenv-DGyLln7U.mjs";
 import { t as detectHarness } from "../harness-C8Nxxyn_.mjs";
-import { n as stagedContent, r as stagedFiles, t as checkStaged } from "../run-DOARDruz.mjs";
+import { n as stagedContent, r as stagedFiles, t as checkStaged } from "../run-D-Ydrw3D.mjs";
 import { n as writeInitFile, t as initFor } from "../run-Do2JltgU.mjs";
-import { Dt as claudeHome, Et as todayUtc, t as handleHook } from "../handle-t-lQuQc7.mjs";
+import { Ot as todayUtc, kt as claudeHome, t as handleHook } from "../handle-gYSq5znf.mjs";
 import { join } from "node:path";
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { homedir } from "node:os";

package/dist/cli/index.mjs

@@ -1,2 +1,2 @@
-import { n as stagedContent, r as stagedFiles, t as checkStaged } from "../run-DOARDruz.mjs";
+import { n as stagedContent, r as stagedFiles, t as checkStaged } from "../run-D-Ydrw3D.mjs";
 export { checkStaged, stagedContent, stagedFiles };

package/dist/config/index.d.mts

@@ -1,2 +1,2 @@
-import { a as STATE_GITIGNORE, c as DEFAULT_MAX_LINES, d as splitTarget, f as DEFAULT_TTL_SEC, g as parseEnvInt, h as ttlLabel, i as ProjectLayout, l as MAX_LINES_ENV_KEY, m as resolveTtlSec, n as loadDotenv, o as STATE_ROOT, p as TTL_ENV_KEY, r as parseEnvFile, s as projectLayout, t as envCandidates, u as resolveMaxLines } from "../index-DLUfyYmU.mjs";
-export { DEFAULT_MAX_LINES, DEFAULT_TTL_SEC, MAX_LINES_ENV_KEY, ProjectLayout, STATE_GITIGNORE, STATE_ROOT, TTL_ENV_KEY, envCandidates, loadDotenv, parseEnvFile, parseEnvInt, projectLayout, resolveMaxLines, resolveTtlSec, splitTarget, ttlLabel };
+import { _ as parseEnvInt, a as ProjectLayout, c as projectLayout, d as resolveMaxLines, f as splitTarget, g as ttlLabel, h as resolveTtlSec, i as parseEnvFile, l as DEFAULT_MAX_LINES, m as TTL_ENV_KEY, n as envCandidates, o as STATE_GITIGNORE, p as DEFAULT_TTL_SEC, r as loadDotenv, s as STATE_ROOT, t as HOME_DIR, u as MAX_LINES_ENV_KEY } from "../index-COBvvc3L.mjs";
+export { DEFAULT_MAX_LINES, DEFAULT_TTL_SEC, HOME_DIR, MAX_LINES_ENV_KEY, ProjectLayout, STATE_GITIGNORE, STATE_ROOT, TTL_ENV_KEY, envCandidates, loadDotenv, parseEnvFile, parseEnvInt, projectLayout, resolveMaxLines, resolveTtlSec, splitTarget, ttlLabel };

package/dist/config/index.mjs

@@ -1,5 +1,6 @@
 import { a as parseEnvInt, i as splitTarget, n as MAX_LINES_ENV_KEY, r as resolveMaxLines, t as DEFAULT_MAX_LINES } from "../limits-CHn8AIL1.mjs";
-import { a as TTL_ENV_KEY, i as DEFAULT_TTL_SEC, n as loadDotenv, o as resolveTtlSec, r as parseEnvFile, s as ttlLabel, t as envCandidates } from "../dotenv-TLNMiSjP.mjs";
+import { i as ttlLabel, n as TTL_ENV_KEY, r as resolveTtlSec, t as DEFAULT_TTL_SEC } from "../ttl-BG55s6HZ.mjs";
 import { n as STATE_ROOT, r as projectLayout, t as STATE_GITIGNORE } from "../layout-C0jaaCQC.mjs";
+import { i as parseEnvFile, n as envCandidates, r as loadDotenv, t as HOME_DIR } from "../dotenv-DGyLln7U.mjs";
 import "../config-la_KkjCS.mjs";
-export { DEFAULT_MAX_LINES, DEFAULT_TTL_SEC, MAX_LINES_ENV_KEY, STATE_GITIGNORE, STATE_ROOT, TTL_ENV_KEY, envCandidates, loadDotenv, parseEnvFile, parseEnvInt, projectLayout, resolveMaxLines, resolveTtlSec, splitTarget, ttlLabel };
+export { DEFAULT_MAX_LINES, DEFAULT_TTL_SEC, HOME_DIR, MAX_LINES_ENV_KEY, STATE_GITIGNORE, STATE_ROOT, TTL_ENV_KEY, envCandidates, loadDotenv, parseEnvFile, parseEnvInt, projectLayout, resolveMaxLines, resolveTtlSec, splitTarget, ttlLabel };

package/dist/{doc-helpers-Dd_x1-tZ.mjs → doc-helpers-B4XYL1v8.mjs}

@@ -11,20 +11,22 @@ function sessionAuthsFor(authorizations, sessionId) {
 function evaluateDoc(auths) {
 	const sources = auths.flatMap((a) => a.sources ?? [a.source ?? ""]);
 	const readPaths = auths.flatMap((a) => a.read_paths ?? []);
-	const liveC7 = sources.some((s) => /context7/.test(s));
-	const liveExa = sources.some((s) => /exa/.test(s));
+	const liveC7 = sources.some((s) => /context7/i.test(s));
+	const liveExa = sources.some((s) => /exa/i.test(s));
+	const liveWeb = sources.some((s) => /web(search|fetch)/i.test(s));
 	const cacheC7 = readPaths.some((p) => /\/context\/mcp\/context7-/.test(p));
 	const cacheExa = readPaths.some((p) => /\/context\/mcp\/(exa-search|exa-code-context)-/.test(p));
 	return {
 		context7: liveC7 || cacheC7,
 		exa: liveExa || cacheExa,
+		web: liveWeb,
 		viaCache: !liveC7 && cacheC7 || !liveExa && cacheExa
 	};
 }
-/** True when BOTH Context7 and Exa were satisfied for the session. */
+/** True when ANY documentation source (Context7, Exa, or web) was satisfied for the session. */
 function isDocConsulted(authorizations, sessionId) {
 	const s = evaluateDoc(sessionAuthsFor(authorizations, sessionId));
-	return s.context7 && s.exa;
+	return s.context7 || s.exa || s.web;
 }
 /** Report how each doc source was satisfied for a session. */
 function formatDocSatisfactionStatus(authorizations, sessionId) {
@@ -34,8 +36,8 @@ function formatDocSatisfactionStatus(authorizations, sessionId) {
 function formatDocDeny(framework) {
 	return [
 		`APEX: Online documentation not consulted for ${framework}!`,
-		"Use BOTH: 1) mcp__context7__query-docs AND 2) mcp__exa__web_search_exa.",
-		"This check is once per session — after consulting both, Write/Edit will be allowed."
+		"Use ANY ONE of: mcp__context7__query-docs, mcp__exa__web_search_exa, WebSearch, or WebFetch.",
+		"This check is once per session — after consulting one source, Write/Edit will be allowed."
 	].join("\n");
 }
 //#endregion

package/dist/{doc-helpers-CG1nuf-c.d.mts → doc-helpers-D14nkD5D.d.mts}

@@ -1,7 +1,8 @@
 //#region src/freshness/doc-helpers.d.ts
 /**
-* Documentation-consultation freshness: was Context7 AND Exa consulted this
-* session (via live MCP query, or a Read on a cached MCP result file)?
+* Documentation-consultation freshness: was ANY documentation source consulted
+* this session — Context7, Exa, or WebSearch/WebFetch — via a live call or a
+* Read on a cached MCP result file?
 */
 /** Authorization entry from APEX state (legacy session + new sessions[]). */
 interface AuthEntry {
@@ -18,9 +19,10 @@ declare function resolveSessions(auth: AuthEntry | undefined): string[];
 interface DocSatisfactionStatus {
   context7: boolean;
   exa: boolean;
+  web: boolean;
   viaCache: boolean;
 }
-/** True when BOTH Context7 and Exa were satisfied for the session. */
+/** True when ANY documentation source (Context7, Exa, or web) was satisfied for the session. */
 declare function isDocConsulted(authorizations: Record<string, AuthEntry> | undefined, sessionId: string): boolean;
 /** Report how each doc source was satisfied for a session. */
 declare function formatDocSatisfactionStatus(authorizations: Record<string, AuthEntry> | undefined, sessionId: string): DocSatisfactionStatus;

package/dist/{dotenv-TLNMiSjP.mjs → dotenv-DGyLln7U.mjs}

@@ -1,25 +1,6 @@
-import { a as parseEnvInt } from "./limits-CHn8AIL1.mjs";
 import { join } from "node:path";
 import { existsSync, readFileSync } from "node:fs";
 import { homedir } from "node:os";
-//#region src/config/ttl.ts
-/** Default enforcement-freshness window, in seconds (2 minutes). */
-const DEFAULT_TTL_SEC = 120;
-/** Default env var name carrying the TTL override. */
-const TTL_ENV_KEY = "FUSE_ENFORCE_TTL_SEC";
-/**
-* Resolve the enforcement TTL (seconds) from an env map.
-* @param env - environment map (defaults to `process.env`)
-* @param key - env var name (defaults to `FUSE_ENFORCE_TTL_SEC`)
-*/
-function resolveTtlSec(env = process.env, key = TTL_ENV_KEY) {
-	return parseEnvInt(env[key], 120);
-}
-/** Human label for a TTL: 120 -> "2min", 240 -> "4min", 90 -> "90s". */
-function ttlLabel(sec) {
-	return sec % 60 === 0 ? `${sec / 60}min` : `${sec}s`;
-}
-//#endregion
 //#region src/config/dotenv.ts
 /**
 * Native .env loader. Ports the claude-plugins `services/env-file.ts`
@@ -71,4 +52,4 @@ function loadDotenv(id, env = process.env, home = homedir(), cwd = process.cwd()
 	for (const path of envCandidates(id, home, cwd)) for (const [k, v] of Object.entries(parseEnvFile(path))) if (env[k] === void 0) env[k] = v;
 }
 //#endregion
-export { TTL_ENV_KEY as a, DEFAULT_TTL_SEC as i, loadDotenv as n, resolveTtlSec as o, parseEnvFile as r, ttlLabel as s, envCandidates as t };
+export { parseEnvFile as i, envCandidates as n, loadDotenv as r, HOME_DIR as t };

package/dist/{evaluate-za4vT-p7.mjs → evaluate-B1n1ti0N.mjs}

@@ -23,20 +23,14 @@ function detectFramework(filePath, content) {
 //#endregion
 //#region src/policy/file-size.ts
 /**
-* Count substantive (code-only) lines — blank lines and comment-only lines
-* (`//`, `*`, `/*` block-comment bodies) don't count toward the SOLID limit, so a
-* well-documented file isn't penalized for its JSDoc. (`#` is intentionally NOT
-* skipped: it is code in Rust `#[derive]` and C `#include`, not a comment.)
+* Count physical lines — parity with the Python `enforce-file-size.py`
+* (`sum(1 for _ in f)`): every line counts (blanks and comments included), and a
+* single trailing newline does not add a phantom line. The SOLID ceiling is
+* measured on raw file length, not substantive code, to match the upstream plugin.
 */
 function countLines(content) {
 	if (content === "") return 0;
-	let n = 0;
-	for (const line of content.split("\n")) {
-		const s = line.trim();
-		if (!s || s.startsWith("//") || s.startsWith("*") || s.startsWith("/*")) continue;
-		n++;
-	}
-	return n;
+	return content.split("\n").length - (content.endsWith("\n") ? 1 : 0);
 }
 /**
 * Evaluate a file's line count against the SOLID limit.
@@ -135,21 +129,21 @@ const CRITICAL_PATTERNS = [
 	/\bfdisk\b/,
 	/\bdiskutil\s+(?:erase|partitionDisk)/i,
 	/(?:>|>>)\s*\/dev\/(?:sda|hda|nvme)/,
-	/\brm\s+(?:-[a-z]*\s+)*-[a-z]*[rf][a-z]*\s+(?:-[a-z]+\s+)*\/(?:etc|usr|var|bin|sbin|boot|lib)\b/
+	/\brm\s+(?:-[a-z]*\s+)*-[a-z]*[rf][a-z]*\s+(?:-[a-z]+\s+)*\/(?:etc|usr|var|bin|sbin|boot|lib)\b/,
+	/(?:^|[\s;|&])sudo(?:[\s;|&]|$)/,
+	/(?:^|[\s;|&])su(?:[\s;|&]|$)/,
+	/(?:^|[\s;|&])doas(?:[\s;|&]|$)/,
+	/(?:^|[\s;|&])passwd(?:[\s;|&]|$)/,
+	/(?:^|[\s;|&])del(?:[\s;|&]|$)/
 ];
 /** Patterns that warrant explicit confirmation before running. */
 const ASK_PATTERNS = [
-	/\bsudo\s/,
 	/\bchmod\s+(?:-[a-zA-Z]+\s+)*777\b/,
 	/\bchown\s+-R\b/,
 	/\beval\s/,
 	/(?:>|>>|\btee\b)\s*\/etc\//,
-	/\bsu\s/,
-	/\bdoas\s/,
-	/\bpasswd\b/,
 	/\brm\s/,
-	/\bunlink\s/,
-	/\bdel\s/
+	/\bunlink\s/
 ];
 /**
 * Strip heredoc bodies so their content isn't matched as a command (false positives).
@@ -179,7 +173,7 @@ function securityGuard(ctx) {
 	for (const re of CRITICAL_PATTERNS) if (re.test(cmd)) return {
 		kind: "block",
 		title: "Dangerous command",
-		reason: "Command matches a destructive pattern (recursive root delete, fork bomb, remote-script piped to a shell, world-writable root, filesystem format, or disk overwrite).",
+		reason: "Command matches a destructive pattern (recursive root delete, fork bomb, remote-script piped to a shell, world-writable root, filesystem format, disk overwrite, or privilege escalation: sudo/su/doas/passwd).",
 		actions: ["Remove the destructive command", "Scope the operation to a specific safe path"]
 	};
 	for (const re of ASK_PATTERNS) if (re.test(cmd)) return {
@@ -192,17 +186,28 @@ function securityGuard(ctx) {
 }
 //#endregion
 //#region src/policy/guards/protected-path.ts
-/** Path fragments that mark a location as internal/generated state. */
+/**
+* Path fragments that mark a location as internal/generated state.
+*
+* Parity with safe_paths.py: `~/.claude/fusengine-cache` is a *writable* cache
+* the harness owns (lessons, MCP cache, per-type state) — only the
+* `fusengine-cache/sessions` subtree is protected, not the whole cache.
+*/
 const PROTECTED_FRAGMENTS = [
 	".claude/plugins/marketplaces",
 	".claude/plugins/cache",
 	".claude/logs/00-apex",
-	".claude/fusengine-cache",
-	".git/",
+	".claude/fusengine-cache/sessions",
 	".claude/apex/",
 	".harness/track",
 	".harness/memory/state"
 ];
+/**
+* Matches a real `.git` directory segment (`/.git/`, `~/.git`, leading or
+* trailing `.git`) without matching unrelated names like `foo.git/` or
+* `.github/`. Kept separate from the substring fragments for precise scoping.
+*/
+const PROTECTED_GIT_RE = /(?:^|[/~\s])\.git(?:\/|$)/;
 /** Standard block response for any protected-path violation. */
 const BLOCK = {
 	kind: "block",
@@ -210,29 +215,48 @@ const BLOCK = {
 	reason: "This is internal/generated enforcement state — do not edit it directly.",
 	actions: ["Edit the source, not the generated/cache/state copy"]
 };
-/** Returns true if `str` contains any protected fragment. */
+/** Returns true if `str` references a protected fragment or a real `.git` segment. */
 function containsProtected(str) {
-	return PROTECTED_FRAGMENTS.some((f) => str.includes(f));
+	return PROTECTED_FRAGMENTS.some((f) => str.includes(f)) || PROTECTED_GIT_RE.test(str);
+}
+/** Strips surrounding quotes from a captured shell token. */
+function unquote(t) {
+	return t.replace(/^['"]|['"]$/g, "");
 }
 /**
-* Returns true if `cmd` contains a recognisable shell write operation.
+* Extracts the genuine write *targets* of a shell command, so a protected path
+* appearing only as a *read source* (e.g. `grep x .claude/apex/ > out.txt`,
+* `cat .git/config > /dev/null`) is not mistaken for a write.
 *
-* Best-effort: matches `>` / `>>` redirections, `tee`, `cp`, `mv`, `dd`, `sed -i`.
-* Obfuscated shell (base64-decoded payloads, variable indirection, process
-* substitution) can still evade this check — residual risk, documented. The
-* real guarantee against a forged track is the transcript-grounded freshness
-* gate (see `freshness/agent-evidence`), not this guard.
+* Covers `>` / `>>` redirects (skipping `2>`, `&>`, `1>` fd-redirects and
+* `/dev/null`), `tee`, `dd of=`, and the destination / in-place file of
+* `cp` / `mv` / `sed -i` / `perl -i` (last path token of the segment).
+* Best-effort: obfuscated shell (base64, indirection, process substitution)
+* can still evade this — residual risk, mitigated by the freshness gate.
 */
-function bashHasWriteOp(cmd) {
-	return />/.test(cmd) || /\btee\b/.test(cmd) || /\bcp\b/.test(cmd) || /\bmv\b/.test(cmd) || /\bdd\b/.test(cmd) || /\bsed\s+-[a-zA-Z]*i/.test(cmd);
+function extractWriteTargets(cmd) {
+	const out = [];
+	const push = (t) => {
+		const v = unquote((t ?? "").trim());
+		if (v && v !== "/dev/null") out.push(v);
+	};
+	for (const m of cmd.matchAll(/(?<![2&\d])>{1,2}\s*('[^']+'|"[^"]+"|\S+)/g)) push(m[1]);
+	for (const m of cmd.matchAll(/\btee\b(?:\s+-\S+)*\s+('[^']+'|"[^"]+"|\S+)/g)) push(m[1]);
+	for (const m of cmd.matchAll(/\bdd\b[^|;&]*\bof=('[^']+'|"[^"]+"|\S+)/g)) push(m[1]);
+	for (const seg of cmd.split(/[;&|]+/)) {
+		if (!/\b(?:cp|mv)\b|\b(?:sed|perl)\b[^|;&]*\s-i/.test(seg)) continue;
+		const toks = (seg.split(/[<>]/)[0] ?? "").trim().split(/\s+/).filter((t) => Boolean(t) && !t.startsWith("-"));
+		push(toks[toks.length - 1]);
+	}
+	return out;
 }
 /**
 * Blocks direct edits to internal/generated state directories.
 *
 * Covers:
 *  - Write / Edit tool calls whose `filePath` targets a protected fragment.
-*  - Bash commands that both reference a protected fragment *and* contain a
-*    recognisable shell write operation (best-effort; see `bashHasWriteOp`).
+*  - Bash commands whose actual write *target* is a protected fragment
+*    (read sources are ignored; see `extractWriteTargets`).
 *
 * @param ctx - The guard context (tool, filePath, command).
 * @returns A blocking {@link Prompt}, or null to allow.
@@ -242,18 +266,25 @@ function protectedPathGuard(ctx) {
 		if (containsProtected(ctx.filePath)) return BLOCK;
 	}
 	if (ctx.tool === "Bash" && ctx.command) {
-		if (containsProtected(ctx.command) && bashHasWriteOp(ctx.command)) return BLOCK;
+		if (extractWriteTargets(ctx.command).some(containsProtected)) return BLOCK;
 	}
 	return null;
 }
 //#endregion
 //#region src/policy/guards/bash-write.ts
 /** Redirect (`>`/`>>`) targeting a code-file extension. */
-const CODE_REDIRECT = /(?:>>?)\s*[^\s|;&]*\.(?:ts|tsx|js|jsx|py|go|rb|rs|java|kt|php|swift|vue|svelte|c|cpp|h)\b/;
-/** Interpreters / tools that mutate source in place, plus heredoc-into-file. */
-const CODE_MUTATORS = /\bpython3?\s+-c\b|\bsed\s+-i\b|\bperl\s+-i\b|\bawk\s+-i\s+inplace\b|\bpatch\s+|<<[-~]?\s*['"]?\w+['"]?[\s\S]*?>/;
-/** Redirect to a non-code file, or other ambiguous file writers (ASK). */
-const ASK_WRITERS = /(?:>>?\s*[^\s|;&]+)|\btee\s+|\bdd\s+of=|\bnode\s+-e\b.*(?:writeFile|appendFile)|\bruby\s+-e\b.*File\.write/;
+const CODE_REDIRECT = /(?:>>?)\s*[^\s|;&]*\.(?:ts|tsx|js|jsx|py|go|rb|rs|java|kt|php|swift|vue|svelte|astro|css|c|cpp|h)\b/;
+/** Interpreters / tools that mutate source in place, plus heredoc-into-file.
+* `sed`/`perl`/`awk` allow intervening flags before `-i` (parity bash-write-guard.py). */
+const CODE_MUTATORS = /\bpython3?\s+-c\b|\bpython3?\s+-\s*<<|\bsed\b[^|]*\s-i|\bperl\b[^|]*\s-[pi]i?\b|\bawk\b[^|]*-i\s*inplace|\bpatch\b|<<[-~]?\s*['"]?\w+['"]?[\s\S]*?>/;
+/** File-mutating one-liners via `node -e` / `ruby -e` (parity NODE_WRITES/RUBY_WRITES). */
+const NODE_WRITES = /writeFile|appendFile|createWriteStream|fs\.(?:write|rename|unlink|mkdir|rmdir|copyFile)|execSync|spawnSync|child_process/;
+const RUBY_WRITES = /File\.(?:write|open|delete|rename)|IO\.write|FileUtils|\bsystem\b|\bexec\b|`[^`]/;
+/** Redirect to a non-code file. Excludes `/dev/null`, `2>`/`N>` and `>&N` fd
+* redirects via the `(?<![0-9&])` lookbehind + `(?!…|&)` (parity has_file_redirect). */
+const FILE_REDIRECT = /(?<![0-9&])\s*>>?\s*(?!\/dev\/null|&)[a-zA-Z./~$]/;
+/** Other ambiguous file writers (ASK): `tee <file>` (not `tee -a`/path) and `dd … of=`. */
+const ASK_WRITERS = /\btee\s+[^-/\s]|\bdd\b[^|]*\bof=/;
 /**
 * Blocks shell commands that mutate code files in place (and heredocs/redirects
 * to source files); asks before other file-writing shell commands. Forces use
@@ -268,7 +299,7 @@ function bashWriteGuard(ctx) {
 		reason: "Shell in-place edits / redirects to source files bypass APEX/SOLID checks.",
 		actions: ["Use the Write/Edit tool instead"]
 	};
-	if (ASK_WRITERS.test(cmd)) return {
+	if (FILE_REDIRECT.test(cmd) || ASK_WRITERS.test(cmd) || /\bnode\s+-e\b/.test(cmd) && NODE_WRITES.test(cmd) || /\bruby\s+-e\b/.test(cmd) && RUBY_WRITES.test(cmd)) return {
 		kind: "ask",
 		title: "Bash file write",
 		reason: "This command writes a file from the shell; confirm it is intended.",
@@ -282,8 +313,12 @@ function bashWriteGuard(ctx) {
 const TS_DECL_RE = /^\s*(export\s+)?(interface|type)\s+[A-Z]/m;
 /** Python view models: class subclassing a schema/protocol base. */
 const PY_MODEL_RE = /^\s*class\s+\w+\((BaseModel|TypedDict|Protocol)\)/m;
-/** PHP controllers: top-level `interface` / `abstract class`. */
-const PHP_DECL_RE = /^\s*(interface|abstract class)\b/m;
+/**
+* PHP controllers: top-level `interface`, `abstract class`, or a concrete
+* `class …Interface/DTO/Request`. Union of the TS-only `abstract class` rule
+* and the Python rule (`class [A-Z].*(Interface|DTO|Request)`, enforce-interfaces.py:16).
+*/
+const PHP_DECL_RE = /^\s*(?:abstract\s+class\b|interface\b|class\s+[A-Z].*(?:Interface|DTO|Request))/m;
 /** Swift views: top-level `protocol Foo`. */
 const SWIFT_PROTO_RE = /^\s*protocol\s+[A-Z]/m;
 /** Go handlers/controllers: top-level `type Foo interface`. */
@@ -294,6 +329,11 @@ const JAVA_DECL_RE = /^\s*(?:public\s+|private\s+|protected\s+|internal\s+)?(?:i
 * Blocks top-level interface/type/protocol declarations in component, view or
 * controller files (Interface Segregation). Fires only when BOTH the path
 * category AND the content pattern match.
+*
+* Parity note: enforce-interfaces.py only inspects `Write` (tool_input.content).
+* We deliberately also fire on `Edit` — an in-place edit can introduce the same
+* violation — and the path fragments accept singular *and* plural directory
+* names (`view/` + `views/`), mirroring the Python `s?` regexes.
 */
 function interfaceSeparationGuard(ctx) {
 	if (ctx.tool !== "Write" && ctx.tool !== "Edit") return null;
@@ -308,11 +348,11 @@ function interfaceSeparationGuard(ctx) {
 	};
 	const inAny = (...frags) => frags.some((f) => path.includes(f));
 	if (/\.(tsx|jsx|vue|svelte)$/.test(path) && TS_DECL_RE.test(content)) return block;
-	if (/\.py$/.test(path) && inAny("views/", "controllers/", "routes/") && PY_MODEL_RE.test(content)) return block;
-	if (/\.go$/.test(path) && inAny("handlers/", "controllers/") && GO_DECL_RE.test(content)) return block;
-	if (/\.(java|kt)$/.test(path) && inAny("controllers/", "handlers/") && JAVA_DECL_RE.test(content)) return block;
-	if (/\.php$/.test(path) && inAny("Controllers/", "Handlers/") && PHP_DECL_RE.test(content)) return block;
-	if (/\.swift$/.test(path) && inAny("Views/", "Components/") && SWIFT_PROTO_RE.test(content)) return block;
+	if (/\.py$/.test(path) && inAny("view/", "views/", "controller/", "controllers/", "route/", "routes/") && PY_MODEL_RE.test(content)) return block;
+	if (/\.go$/.test(path) && inAny("handler/", "handlers/", "controller/", "controllers/") && GO_DECL_RE.test(content)) return block;
+	if (/\.(java|kt)$/.test(path) && inAny("controller/", "controllers/", "handler/", "handlers/") && JAVA_DECL_RE.test(content)) return block;
+	if (/\.php$/.test(path) && inAny("Controller/", "Controllers/", "Handler/", "Handlers/") && PHP_DECL_RE.test(content)) return block;
+	if (/\.swift$/.test(path) && inAny("View/", "Views/", "Component/", "Components/") && SWIFT_PROTO_RE.test(content)) return block;
 	return null;
 }
 //#endregion
@@ -434,4 +474,4 @@ function evaluate(ctx) {
 	};
 }
 //#endregion
-export { evaluateFileSize as A, securityGuard as C, SYSTEM_INSTALL as D, PROJECT_INSTALL as E, matchPatterns as O, CRITICAL_PATTERNS as S, GIT_BLOCKED as T, CODE_REDIRECT as _, registerGuard as a, protectedPathGuard as b, GO_DECL_RE as c, PY_MODEL_RE as d, SWIFT_PROTO_RE as f, CODE_MUTATORS as g, ASK_WRITERS as h, clearUserGuards as i, detectFramework as j, countLines as k, JAVA_DECL_RE as l, interfaceSeparationGuard as m, FAIL_CLOSED as n, runGuards as o, TS_DECL_RE as p, GUARDS as r, installGuard as s, evaluate as t, PHP_DECL_RE as u, bashWriteGuard as v, GIT_ASK as w, ASK_PATTERNS as x, PROTECTED_FRAGMENTS as y };
+export { matchPatterns as A, ASK_PATTERNS as C, GIT_BLOCKED as D, GIT_ASK as E, evaluateFileSize as M, detectFramework as N, PROJECT_INSTALL as O, protectedPathGuard as S, securityGuard as T, CODE_REDIRECT as _, registerGuard as a, PROTECTED_FRAGMENTS as b, GO_DECL_RE as c, PY_MODEL_RE as d, SWIFT_PROTO_RE as f, CODE_MUTATORS as g, ASK_WRITERS as h, clearUserGuards as i, countLines as j, SYSTEM_INSTALL as k, JAVA_DECL_RE as l, interfaceSeparationGuard as m, FAIL_CLOSED as n, runGuards as o, TS_DECL_RE as p, GUARDS as r, installGuard as s, evaluate as t, PHP_DECL_RE as u, FILE_REDIRECT as v, CRITICAL_PATTERNS as w, PROTECTED_GIT_RE as x, bashWriteGuard as y };

package/dist/freshness/index.d.mts

@@ -1,3 +1,3 @@
-import { a as isDocConsulted, i as formatDocSatisfactionStatus, n as DocSatisfactionStatus, o as resolveSessions, r as formatDocDeny, t as AuthEntry } from "../doc-helpers-CG1nuf-c.mjs";
+import { a as isDocConsulted, i as formatDocSatisfactionStatus, n as DocSatisfactionStatus, o as resolveSessions, r as formatDocDeny, t as AuthEntry } from "../doc-helpers-D14nkD5D.mjs";
 import { t as incrementTrivialEditCounter } from "../index-BOBXQ91y.mjs";
 export { AuthEntry, DocSatisfactionStatus, formatDocDeny, formatDocSatisfactionStatus, incrementTrivialEditCounter, isDocConsulted, resolveSessions };

package/dist/freshness/index.mjs

@@ -1,3 +1,3 @@
-import { i as resolveSessions, n as formatDocSatisfactionStatus, r as isDocConsulted, t as formatDocDeny } from "../doc-helpers-Dd_x1-tZ.mjs";
+import { i as resolveSessions, n as formatDocSatisfactionStatus, r as isDocConsulted, t as formatDocDeny } from "../doc-helpers-B4XYL1v8.mjs";
 import { t as incrementTrivialEditCounter } from "../freshness-43gxYpiX.mjs";
 export { formatDocDeny, formatDocSatisfactionStatus, incrementTrivialEditCounter, isDocConsulted, resolveSessions };